3 ms·

Just got some new ips and I've been on the other end of this. Some staging domain of a website still points to one of the ips I got and there's a health checker

Just got some new ips and I've been on the other end of this. Some staging domain of a website still points to one of the ips I got and there's a health checker that keeps trying to ping /health on the domain. Nowhere near the scale of this though, just some background noise I'll ignore

keketi 8y ago
Same here. Soon after launching a cloud hosted virtual machine I noticed that it was getting a lot of unexpected HTTP traffic on port 80. They were GET requests with parameters that suggested to me that it was coming from some kind of Javascript browser tracker. I rebooted the VM to get a new IP address and the traffic stopped. It's somebody else's problem now.
imhoguy 8y ago
Serve them a cheap gzip b0mb (example [0]) - it sould move their ass to clean up things. [0] https://blog.haschek.at/post/f2fda https://blog.haschek.at/post/f2fda
- dx034 8y ago
  The users are often innocent, they just want to use the old page. Best is to just serve a 403 or refuse the connection.
- dogma1138 8y ago
  That’s a nice way of getting your ass in a heap of trouble especially if you experience a drive-by by a legitimate service. Essentially don’t do anything you wouldn’t do in a wrong number call or if someone is knocking on your door looking for the previous tenant.
datenwolf 8y ago
> Nowhere near the scale of this though, just some background noise I'll ignore Same situation here. However being on the receiving end of a "formerly" Russian camgirl site makes this a little more than just noise. Any good ideas of what one could do with that?
dx034 8y ago
The problem for you is that you can't do much against it. The domain owner can easily change the record, you can't. The only way is to blackhole all requests coming in for domains other than the ones you want to host. Or is there any way to get the DNS records checked?

keketi 8y ago

Same here. Soon after launching a cloud hosted virtual machine I noticed that it was getting a lot of unexpected HTTP traffic on port 80. They were GET requests with parameters that suggested to me that it was coming from some kind of Javascript browser tracker. I rebooted the VM to get a new IP address and the traffic stopped. It's somebody else's problem now.

imhoguy 8y ago

Serve them a cheap gzip b0mb (example [0]) - it sould move their ass to clean up things. [0] https://blog.haschek.at/post/f2fda https://blog.haschek.at/post/f2fda

dx034 8y ago
The users are often innocent, they just want to use the old page. Best is to just serve a 403 or refuse the connection.
dogma1138 8y ago
That’s a nice way of getting your ass in a heap of trouble especially if you experience a drive-by by a legitimate service. Essentially don’t do anything you wouldn’t do in a wrong number call or if someone is knocking on your door looking for the previous tenant.

datenwolf 8y ago

> Nowhere near the scale of this though, just some background noise I'll ignore Same situation here. However being on the receiving end of a "formerly" Russian camgirl site makes this a little more than just noise. Any good ideas of what one could do with that?

dx034 8y ago

The problem for you is that you can't do much against it. The domain owner can easily change the record, you can't. The only way is to blackhole all requests coming in for domains other than the ones you want to host. Or is there any way to get the DNS records checked?